second-brain
Pass
Audited by Gen Agent Trust Hub on Jun 19, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill does not contain any malicious patterns, prompt injections, or obfuscated code. It serves a clear utility for note organization and retrieval.
- [EXTERNAL_DOWNLOADS]: Uses the
rapidfuzzlibrary for fuzzy search capabilities andboto3for S3 backend support. Both are widely used and trusted packages from the official Python Package Index (PyPI). - [DATA_EXPOSURE]: The
scripts/storage.pyfile implements a security guard in theLocalStorageclass that prevents path traversal attacks by ensuring all file operations are restricted to the children of the definedBRAIN_ROOTdirectory. - [COMMAND_EXECUTION]: All commands are executed via a custom Python CLI (
scripts/brain.py) which manages files through a controlled storage abstraction layer rather than raw shell execution of untrusted input.
Audit Metadata